Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: JBv/OoVm6yHQc/eFoe4TeNXHkD4644F3sSRaPpIMokc=
Subject key identifier: B5:21:16:82:44:4E:7C:13:3D:D0:D6:45:6B:4F:30:B7:DB:73:43:3A
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 019FAC75EB86FDB25949E0926A85049BA8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:36 +0000
Manifest this update: Wed 29 Jul 2026 06:00:36 +0000
Manifest next update: Thu 30 Jul 2026 06:00:36 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: f7N62YfDFTaJmZS+tcU1XkOlNj4vm+uWXGiwzm/bmA4=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:eb:86:fd:b2:59:49:e0:92:6a:85:04:9b:a8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Jul 29 06:00:36 2026 GMT
Not After : Jul 30 06:00:36 2026 GMT
Subject: CN=b5211682444e7c133dd0d6456b4f30b7db73433a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:db:18:0b:ac:c6:81:95:ee:45:32:40:7b:
48:68:c5:d0:94:ce:84:8b:53:3e:61:b5:84:a7:d4:
54:85:ac:af:3f:ac:04:42:fc:e0:12:77:cd:eb:43:
17:c6:da:80:c9:57:40:ff:dd:ac:a3:53:2e:da:7a:
10:cd:e4:22:ae:80:95:47:82:9d:48:3a:06:1c:1f:
35:4c:fb:e6:3d:ef:53:68:4e:c6:ae:b2:3e:43:46:
25:d6:ba:57:df:51:7d:ea:86:4b:46:21:17:4e:fc:
e4:1c:6e:93:03:86:eb:58:99:03:64:5f:54:35:f3:
82:ce:99:51:a0:40:ff:32:24:62:e3:03:9b:5e:b4:
77:81:87:91:89:c8:fa:50:68:7e:b8:64:44:20:9a:
c2:3a:07:d2:80:15:3f:94:cb:26:0c:90:9f:77:00:
df:5d:50:9d:9a:30:72:61:ea:00:22:39:7f:c3:50:
04:0a:3d:a2:62:83:5a:3b:c9:1b:79:4d:a2:9f:36:
08:b3:5c:ac:c5:5e:2f:59:61:c3:7b:44:90:b4:b7:
ec:5b:2b:1b:1f:86:f8:dc:34:1d:84:29:23:3e:fb:
8e:13:77:8b:8e:6b:f5:6b:c4:80:41:7d:46:77:c8:
49:54:a4:15:e1:46:99:75:3a:93:8c:74:a8:f3:f6:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:16:82:44:4E:7C:13:3D:D0:D6:45:6B:4F:30:B7:DB:73:43:3A
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:9c:18:22:b7:2c:79:6e:75:b7:a3:bb:e1:19:55:a2:90:
b9:c1:63:c1:d3:92:c7:28:e8:78:64:27:c8:db:c0:94:53:77:
f4:a3:d2:4b:a4:a2:e2:80:37:31:6b:df:a7:7e:23:ba:b1:f4:
0b:7a:4d:3b:8b:6e:6e:f6:82:ed:fe:89:04:90:48:26:ed:58:
ce:39:34:10:a1:14:da:fb:ed:1a:af:a0:d1:e4:a5:2c:dc:35:
3e:f3:69:39:bc:39:1e:f3:d5:36:d5:c2:71:9e:bd:66:78:f9:
86:d8:bb:51:b7:a3:69:2c:7b:c2:a0:03:3e:de:96:1c:d2:c5:
36:5b:2e:f7:ee:51:84:29:80:94:d2:63:50:e2:31:cc:90:4b:
08:7d:33:99:25:33:37:b2:be:36:24:4b:4b:cd:21:fd:96:d3:
0d:92:5f:38:af:25:16:54:ee:bf:55:dd:ac:41:ab:da:96:7e:
d6:32:68:45:f3:74:bb:c4:3b:28:f1:a8:19:30:c0:62:76:df:
1d:88:18:84:ea:2e:9f:db:7c:57:da:67:52:6e:94:96:22:f0:
cb:25:a2:ee:1c:d4:f4:6c:85:4a:22:5b:98:7a:1a:97:ea:32:
51:ac:61:41:c4:3b:ae:2c:3e:1e:3e:86:11:1f:42:cd:e5:6c:
7b:24:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:36 2026 by rpki-client